On 02/08/2018 10:52 AM, Zenny wrote: > On Thu, Feb 8, 2018 at 5:22 PM, Tom Eastep <teas...@shorewall.net > <mailto:teas...@shorewall.net>> wrote: > > On 02/08/2018 02:07 AM, Zenny wrote: > > Hi, > > > > I am trying to figure out to establish one-to-one NAT to a single > > development VM instance running in LOC network to cater it as if it is > > in the DMZ network. > > > > Appreciate your inputs. Thanks. > > > > I don't understand completely what you are trying to accomplish. Is it > that you have a three-interface configuration (net,loc and dmz), and you > want to have a host in the local network respond to an address that > would normally fall in the DMZ? > > > Yep, rightly guessed. > > > If so, are the DMZ addresses public or > private? > > > I have just one public IP and the all other networks loc and dmz are > running in private network which shorewall handles for DNAT and SNATs. > > > Do you want hosts in the loc zone to be able to use the DMZ > address to access this particular system? > > > Exactly! >
That is basically Shorewall FAQ 2 (http://www.shorewall.net/FAQ.htm#faq2). -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
